A.C. Roman & Associates, Inc., a private investigation firm, experienced an external system breach via hacking that occurred on September 24, 2025. The company discovered this breach on December 4, 2025, and subsequently provided written notification to affected consumers on March 20, 2026. This incident was confirmed by filings with the Maine Attorney General and the Indiana Attorney General.
The breach involved the exposure of names or other personal identifiers. A total of 786 individuals were affected, including at least one resident in Indiana and one resident in Maine. The specific types of data exposed beyond names and personal identifiers, such as Social Security numbers, medical information, or financial data, have not been publicly disclosed. Identity theft protection services for 12 months through Experian IdentityWorks were offered to those affected.
Details can emerge later, and additional notices may be delayed.